Skip to content

[Backport release-21.11] nixos/nginx: update SystemCallFilter#163319

Merged
Lassulus merged 2 commits intoNixOS:release-21.11from
Izorkin:backport-fix-nginx
Apr 20, 2022
Merged

[Backport release-21.11] nixos/nginx: update SystemCallFilter#163319
Lassulus merged 2 commits intoNixOS:release-21.11from
Izorkin:backport-fix-nginx

Conversation

@Izorkin
Copy link
Contributor

@Izorkin Izorkin commented Mar 8, 2022

Description of changes

Backport updates from #147027 and #163208 PRs.

Things done
  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 22.05 Release Notes (or backporting 21.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
    • (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes
  • Fits CONTRIBUTING.md.

Izorkin added 2 commits March 8, 2022 16:11
@Izorkin
nixos/nginx: tengine requires allowing @ipc calls
58040d5 
(cherry picked from commit 7376f4e)
@Izorkin
nginxModules: add option disableIPC
c3dc2e2 
The disableIPC option is required to checking enabled nginxModules
and disable the SystemCallFilter IPC filter.

(cherry picked from commit b672e4d)
@Izorkin Izorkin requested a review from jonringer as a code owner March 8, 2022 13:18
@github-actions github-actions bot added 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 8.has: module (update) This PR changes an existing module in `nixos/` labels Mar 8, 2022
@Izorkin
Copy link
Contributor Author

Izorkin commented Mar 8, 2022

cc @SuperSandro2000 @Mic92 @ajs124 @dasJ

@ofborg ofborg bot added 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 0 This PR does not cause any packages to rebuild on Linux. labels Mar 8, 2022
@Izorkin Izorkin changed the title Backport release-21.11] nixos/nginx: update SystemCallFilter [Backport release-21.11] nixos/nginx: update SystemCallFilter Mar 31, 2022
@Izorkin
Copy link
Contributor Author

Izorkin commented Apr 6, 2022

cc @SuperSandro2000 @Mic92 @ajs124 @dasJ

@Lassulus Lassulus merged commit c5076b5 into NixOS:release-21.11 Apr 20, 2022
@Izorkin Izorkin deleted the backport-fix-nginx branch April 20, 2022 20:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jonringer jonringer Awaiting requested review from jonringer

Assignees

No one assigned

Labels

6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 8.has: module (update) This PR changes an existing module in `nixos/` 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 0 This PR does not cause any packages to rebuild on Linux.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Izorkin @Lassulus